0disoft/AI-BOM Generator
Generate an AI/ML bill of materials with the ai-bom CLI.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 15, 2026
- License
- Apache 2.0
Pinned Snippet
uses: 0disoft/ai-bom-generator@feb1d8fcd1573ad51461818a4d1c90c60f2e9c9d # v0.6.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| model-directory | Path to the model project directory. | yes | — |
| config | Optional path to an explicit AI-BOM config file. Empty lets the CLI discover aibom.toml in the model directory. | no | "" |
| format | Optional output format override passed to ai-bom. Leave empty to use config or CLI defaults. | no | "" |
| output | Output path for the generated BOM. Relative paths resolve from GITHUB_WORKSPACE; empty defaults under RUNNER_TEMP. | no | "" |
| warning-report | Output path for the warning report. Relative paths resolve from GITHUB_WORKSPACE; empty defaults under RUNNER_TEMP. | no | "" |
| summary | Output path for the JSON summary. Relative paths resolve from GITHUB_WORKSPACE; empty defaults under RUNNER_TEMP. | no | "" |
| manifest | Output path for the generation manifest. Relative paths resolve from GITHUB_WORKSPACE; empty defaults under RUNNER_TEMP. | no | "" |
| error-report | Output path for the hard-failure JSON report. Relative paths resolve from GITHUB_WORKSPACE; empty defaults under RUNNER_TEMP. | no | "" |
| warnings | Optional warning policy override passed to ai-bom. Leave empty to use config or CLI defaults. | no | "" |
| redaction | Redaction mode passed to ai-bom. The off value intentionally permits unredacted generated artifacts. | no | strict |
Outputs
| name | description |
|---|---|
| bom-path | Path to the generated BOM file. |
| warning-report-path | Path to the generated warning report. |
| summary-path | Path to the generated JSON summary. |
| manifest-path | Path to the generated output manifest. |
| error-report-path | Path reserved for the hard-failure JSON report. |
| error-code | Stable error code from a verified hard-failure report when available. |
| error-stage | Failure stage from a verified hard-failure report when available. |
| warning-count | Warning count reported by the JSON summary when available. |
| status | Run status reported by the JSON summary when available. |
| completeness-status | Evidence completeness status reported by the JSON summary when available. |
| format | Output format reported by the JSON summary when available. |
| exit-code | ai-bom process exit code. |